The following Fedora EPEL 9 Security updates need testing:
Age URL
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-8e5425643f
lua-http-0.3-11.el9
5 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-dcd0590d66
libmodsecurity-3.0.14-1.el9
1 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-70ce865582
fcgi-2.4.0-52.el9
The following builds have been pushed to Fedora EPEL 9 updates-testing
chromium-137.0.7151.55-1.el9
rust-av1-grain-0.2.4-1.el9
rust-cc-1.2.25-1.el9
rust-clap-4.5.39-1.el9
rust-clap_builder-4.5.39-1.el9
rust-clap_complete-4.5.52-1.el9
rust-clap_complete_nushell-4.5.6-1.el9
rust-color-eyre-0.6.5-1.el9
rust-color-spantrace-0.3.0-1.el9
rust-cursor-icon-1.2.0-1.el9
rust-hyper-rustls-0.27.6-1.el9
rust-prettyplease-0.2.33-1.el9
rust-webpki-roots-1.0.0-1.el9
rust-webpki-roots0.26-0.26.11-1.el9
Details about builds:
================================================================================
chromium-137.0.7151.55-1.el9 (FEDORA-EPEL-2025-8e1939142a)
A WebKit (Blink) powered web browser that Google doesn't want you to use
--------------------------------------------------------------------------------
Update Information:
Update to 137.0.7151.55
CVE-2025-5063: Use after free in Compositing
CVE-2025-5280: Out of bounds write in V8
CVE-2025-5064: Inappropriate implementation in Background Fetch API
CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
CVE-2025-5066: Inappropriate implementation in Messages
CVE-2025-5281: Inappropriate implementation in BFCache
CVE-2025-5283: Use after free in libvpx
CVE-2025-5067: Inappropriate implementation in Tab Strip
--------------------------------------------------------------------------------
ChangeLog:
* Tue May 27 2025 Than Ngo <[email protected]> - 137.0.7151.55-1
- Update to 137.0.7151.55
* CVE-2025-5063: Use after free in Compositing
* CVE-2025-5280: Out of bounds write in V8
* CVE-2025-5064: Inappropriate implementation in Background Fetch API
* CVE-2025-5065: Inappropriate implementation in FileSystemAccess API
* CVE-2025-5066: Inappropriate implementation in Messages
* CVE-2025-5281: Inappropriate implementation in BFCache
* CVE-2025-5283: Use after free in libvpx
* CVE-2025-5067: Inappropriate implementation in Tab Strip
- Fix FTBFS caused by simdutf and pdfium-png_decoder
- Remove chromium-135-gperf.patch and
chromium-135-add-cfi-suppressions-for-pipewire-functions.patch, merged by
upstream
- Refresh ppc64le patches
- Enable system simdutf for F43
* Tue May 27 2025 Jitka Plesnikova <[email protected]> - 136.0.7103.113-2
- Rebuilt for flac 1.5.0
--------------------------------------------------------------------------------
================================================================================
rust-av1-grain-0.2.4-1.el9 (FEDORA-EPEL-2025-46c97bd1e1)
Helpers for generating and parsing AV1 film grain data
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.4.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 0.2.4-1
- Update to version 0.2.4; Fixes RHBZ#2367735
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.2.3-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
0.2.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
0.2.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-cc-1.2.25-1.el9 (FEDORA-EPEL-2025-a43a884026)
Build-time dependency for Cargo build scripts to invoke the native C compiler
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2.25.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 1.2.25-1
- Update to version 1.2.25; Fixes RHBZ#2368170
--------------------------------------------------------------------------------
================================================================================
rust-clap-4.5.39-1.el9 (FEDORA-EPEL-2025-e3a40d3e98)
Simple to use, efficient, and full-featured Command Line Argument Parser
--------------------------------------------------------------------------------
Update Information:
Update the clap and clap_builder crates to version 4.5.39.
Update the clap_complete crate to version 4.5.52.
Update the clap_complete_nushell crate to version 4.5.6.
Update the color-eyre crate to version 0.6.5.
Update the color-spantrace crate to version 0.3.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 4.5.39-1
- Update to version 4.5.39; Fixes RHBZ#2368827
--------------------------------------------------------------------------------
================================================================================
rust-clap_builder-4.5.39-1.el9 (FEDORA-EPEL-2025-e3a40d3e98)
Simple to use, efficient, and full-featured Command Line Argument Parser
--------------------------------------------------------------------------------
Update Information:
Update the clap and clap_builder crates to version 4.5.39.
Update the clap_complete crate to version 4.5.52.
Update the clap_complete_nushell crate to version 4.5.6.
Update the color-eyre crate to version 0.6.5.
Update the color-spantrace crate to version 0.3.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 4.5.39-1
- Update to version 4.5.39; Fixes RHBZ#2368824
--------------------------------------------------------------------------------
================================================================================
rust-clap_complete-4.5.52-1.el9 (FEDORA-EPEL-2025-e3a40d3e98)
Generate shell completion scripts for your clap::Command
--------------------------------------------------------------------------------
Update Information:
Update the clap and clap_builder crates to version 4.5.39.
Update the clap_complete crate to version 4.5.52.
Update the clap_complete_nushell crate to version 4.5.6.
Update the color-eyre crate to version 0.6.5.
Update the color-spantrace crate to version 0.3.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 4.5.52-1
- Update to version 4.5.52; Fixes RHBZ#2368825
--------------------------------------------------------------------------------
================================================================================
rust-clap_complete_nushell-4.5.6-1.el9 (FEDORA-EPEL-2025-e3a40d3e98)
Generator library used with clap for Nushell completion scripts
--------------------------------------------------------------------------------
Update Information:
Update the clap and clap_builder crates to version 4.5.39.
Update the clap_complete crate to version 4.5.52.
Update the clap_complete_nushell crate to version 4.5.6.
Update the color-eyre crate to version 0.6.5.
Update the color-spantrace crate to version 0.3.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 4.5.6-1
- Update to version 4.5.6; Fixes RHBZ#2368826
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
4.5.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-color-eyre-0.6.5-1.el9 (FEDORA-EPEL-2025-e3a40d3e98)
Error report handler for panics and eyre::Reports
--------------------------------------------------------------------------------
Update Information:
Update the clap and clap_builder crates to version 4.5.39.
Update the clap_complete crate to version 4.5.52.
Update the clap_complete_nushell crate to version 4.5.6.
Update the color-eyre crate to version 0.6.5.
Update the color-spantrace crate to version 0.3.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 0.6.5-1
- Update to version 0.6.5; Fixes RHBZ#2363850
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.6.3-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-color-spantrace-0.3.0-1.el9 (FEDORA-EPEL-2025-e3a40d3e98)
Pretty printer for tracing_error::SpanTrace based on color-backtrace
--------------------------------------------------------------------------------
Update Information:
Update the clap and clap_builder crates to version 4.5.39.
Update the clap_complete crate to version 4.5.52.
Update the clap_complete_nushell crate to version 4.5.6.
Update the color-eyre crate to version 0.6.5.
Update the color-spantrace crate to version 0.3.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 0.3.0-1
- Update to version 0.3.0; Fixes RHBZ#2363851
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.2.1-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-cursor-icon-1.2.0-1.el9 (FEDORA-EPEL-2025-edf3c0d9a8)
Cross platform cursor icon type
--------------------------------------------------------------------------------
Update Information:
Update to version 1.2.0.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 1.2.0-1
- Update to version 1.2.0; Fixes RHBZ#2368457
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
1.1.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Fri Jul 19 2024 Fedora Release Engineering <[email protected]> -
1.1.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Fri Jan 26 2024 Fedora Release Engineering <[email protected]> -
1.1.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-hyper-rustls-0.27.6-1.el9 (FEDORA-EPEL-2025-0b669bd6ec)
Rustls+hyper integration for pure rust HTTPS
--------------------------------------------------------------------------------
Update Information:
Update the hyper-rustls crate to version 0.27.6.
Update the webpki-roots crate to version 1.0.0.
Add a compat package for version 0.26 of the webpki-roots crate.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 0.27.6-1
- Update to version 0.27.6; Fixes RHBZ#2368156
* Sun Jan 19 2025 Fedora Release Engineering <[email protected]> -
0.27.5-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
--------------------------------------------------------------------------------
================================================================================
rust-prettyplease-0.2.33-1.el9 (FEDORA-EPEL-2025-320cd3f35c)
Minimal syn syntax tree pretty-printer
--------------------------------------------------------------------------------
Update Information:
Update to version 0.2.33.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 0.2.33-1
- Update to version 0.2.33; Fixes RHBZ#2369523
--------------------------------------------------------------------------------
================================================================================
rust-webpki-roots-1.0.0-1.el9 (FEDORA-EPEL-2025-0b669bd6ec)
Mozilla's CA root certificates for use with webpki
--------------------------------------------------------------------------------
Update Information:
Update the hyper-rustls crate to version 0.27.6.
Update the webpki-roots crate to version 1.0.0.
Add a compat package for version 0.26 of the webpki-roots crate.
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 26 2025 Fabio Valentini <[email protected]> - 1.0.0-1
- Update to version 1.0.0; Fixes RHBZ#2362543
--------------------------------------------------------------------------------
================================================================================
rust-webpki-roots0.26-0.26.11-1.el9 (FEDORA-EPEL-2025-0b669bd6ec)
Mozilla's CA root certificates for use with webpki
--------------------------------------------------------------------------------
Update Information:
Update the hyper-rustls crate to version 0.27.6.
Update the webpki-roots crate to version 1.0.0.
Add a compat package for version 0.26 of the webpki-roots crate.
--------------------------------------------------------------------------------
ChangeLog:
* Sat May 31 2025 Fabio Valentini <[email protected]> - 0.26.11-1
- Initial import (webpki-roots 0.26 compat package)
--------------------------------------------------------------------------------
--
_______________________________________________
epel-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
